Attorney's Docket No 10559-458001 

Listing of Claims 

This listing of claims replaces all prior versions, and 
listings, of claims in the application: 

1. (Currently Amended) A method comprising: 
defining a key and a set of values, the key being 

determined determinable by the values and a predefined 
relationship— between the values; 

sending efte a first value of the set, but not all of the 
values of the set and information encrypted using the key to a 
server for storage ; and 

sending another a second value of the set, but not all of 
the values of the set to a first delegate^ 

wherein the encrypted information is 
accessible with the key, 

inaccessible with the first of the values of the set 
absent the second of the values of the set, and 

inaccessible with the second of the values of the set 
absent the first of the values of the set . 

2. (Currently Amended) The method of claim 1 further 
comprising : 

generating a second set of values, the key being also 
determined determinable by the values of the second set; 

sending eae a first but not ail of the values of the second 
set to the server; and 

sending another a second but not all of the values of the 
second set to a second delegate^ 

wherein the encrypted information is 

inaccessible with the first of the values of the 
second set absent the second of the values of the second set, 
and 
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inaccessible with the second of the values of the 
second set absent the first of the values of the second set . 

3 . (Currently Amended) The method of claim 2 in which the 
values of the second set are also determined determinable by the 
predefined relationship. 

4. (Original) The method of claim 1 in which the set 
includes exactly two values. 

5. (Original) The method of claim 1 in which the set 
includes three or more values. 

6. (Currently Amended) The method of claim 1 in which the 
first value of the oct cent to the server is associated with a 
descriptor of the first delegate. 

7. (Currently Amended) The method of claim 1 in which the 
probability of guessing the key correctly using knowledge of one 
or more of the values of the set, but not all the values of the 
setj_ is the same as the probability of guessing the key 
correctly using no knowledge of any value of the set. 

8. (Currently Amended) The method of claim 7 in which the 
predefined relationship comprises one or more of the Boolean XOR 
function ea? and a relationship that applies an encryption 
algorithm to one value of the set using another value of the set 
as the encryption algorithm key. 

9. (Original) The method of claim 1 in which the 
information comprises medical information. 

10. (Currently Amended) A method comprising: 

storing, on a server accessible through a network, secured 
information and a first access component, use of access to the 
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secured information requiring a key, the key being determinable 
using the first access component^ et&£ a second access component^ 
and a relationship between the first and second access 
components ; 

excluding both the key and the second access component from 
storage on the server ; and 

providing the secured information and the first access 
component to a first requestor. 

11. (Canceled) 

12. (Currently Amended) The method of claim 10 further 
comprising storing a third access component on the server , ouch 
that the third access component aftd , when combined with a 
fourth access component that is excluded from storage on the 
server, eaee being sufficient to permit use of access to the 
secured information. 

13. (Original) The method of claim 12 further comprising 
providing the secured information and the third access component 
to a second requestor. 

14. (Original) The method of claim 12 further comprising 
deleting the third access component in response to a trigger, 
the trigger being a client instruction, a time limit, a request 
from the first requestor, or a security breach. 

15. (Original) The method of claim 12 further comprising 
identifying the requestor and determining that the requestor 
requires the first access component but not the third access 
component . 

16. (Currently Amended) The method of claim 10 further 
comprising storing permission information about the identity of 



5 



Attorney's Docket No. : 10559-458001 

a party approved for access, such that the secured information 
and the first access component are only provided if the first 
requestor is aft the approved party. 

17. (Original) The method of claim 10 in which the 
secured information is secured by encryption using a key, and 
the first and second access components are related to the key by 
a predefined relationship. 

18. (Currently Amended) A method comprising: 
receiving 

a) from a client, a first access component required 
for use of secured information, — the uoc requiring the first 
access component and a second access component , 

b) from a server accessible through a network, the 
secured information , access to the secured information requiring 
a key, the key being determinable using the first access 
component and a second access component , and 

c) from a source other than the client or the server , 
the second access component^ 

wherein the encrypted information is 
accessible with the key, 

inaccessible with the first access component absent 
the second access component, and 

inaccessible with the second access component absent 
the first access component . 

19. (Original) The method of claim 18 in which the source 
is the server. 

20. (Canceled) 
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21. (Original) The method of claim 18 in which a third 
access component is required in addition to the first and second 
access components for use of the secured information. 

22. (Original) The method of claim 18 in which the 
secured information, the first access component, and the second 
access component are received in a digital form. 

23. (Currently Amended) An article comprising a machine- 
readable medium that stores machine-executable instructions, the 
instructions being operable to causing cause a machine to: 

define a key and a set of values, the key being determined 
determinable by the values and a predefined relationship— 
between the values; 

send ef*e a first but not all of the values of the set and 
information encrypted using the key to a server for storage ; and 

send another a second but not all of the values of the set 
to a first delegate^ 

wherein the encrypted information is 
accessible with the key, 

inaccessible with the first of the values absent the 
second of the values, and 

inaccessible with the second of the values absent the 
first of the values . 

24. (Currently Amended) The article of claim 23 in which 
the instructions further cause a machine to: 

generate a second set of values, the key being 
independently determined determinable by the values of the 
second set; 

send eee a first but not all of the values of the second 
set to the server; and 

send another a second but not all of the values of the 



7 



Attorney's Docket No .: 10559-458001 

29. (Original) A method comprising: 
encrypting information using an encryption key; 
sending the encryption key, but not the encrypted 

information to a first party; 

sending the encrypted information, but not the encryption 
key to a. server. 

30. (Original) The method of claim 29 further comprising 
sending a descriptor of the first party to the server to thereby 
authorize the server to provide the encrypted information to the 
first party. 

31. (New) The method of claim 1 further comprising 
sending, to the server, instructions for allowing the first 
delegate to access the first of the values. 

32. (New) The method of claim 18, further comprising 
sending authentication information to the source other than the 
client or the server to access the second access component. 
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second set to a second delegate^ 

wherein the encrypted information is 

inaccessible with the first of the values of the 
second set absent the second of the values of the second set, 
and 

inaccessible with the second of the values of the 
second set absent the first of the values of the second set . 

25. (Currently Amended) An apparatus comprising a 
processor and instructions configured to cause the processor to: 

receive, from a client, information and a value of a set of 
values, the information being encrypted using a key, the key 
being determined determinable by the values of the set and a 
predefined relationship between the values ; 

store the information and the value, but not all the values 
of the set; and 

transmit, to a delegate, the information and the value. 

26. (Original) The apparatus of claim 25 in which the 
software is further configured to cause the processor to: 

store a second value that is a member of a second set of 
values, the values of the second set being sufficient to 
determine the key using the predefined relationship. 

27. (Currently Amended) The apparatus of claim 2-5- 26_ in 
which the software is further configured to cause the processor 
to: 

delete or deny access to the second value in response to a 
trigger, the trigger being a client instruction, a time limit, a 
request from the delegate, or a security breach. 

28. (Original) The apparatus of claim 25 in which the 
information comprises medical information. 
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